[pfx] Re: IPv6 and RBL checks
Benny Pedersen via Postfix-users wrote in : |Jos Chrispijn via Postfix-users skrev den 2024-05-15 11:25: |> Can someone explain why bl.spamcop.net reverses the ipv6 ip, thus not |> recognizing it like postscreen? This is the usual way to do reverse lookups. RFC 1034 from 1987: 2. Host address to host name translation This function will often follow the form of previous functions. Given a 32 bit IP address, the caller wants a character string. The octets of the IP address are reversed, used as name components, and suffixed with "IN-ADDR.ARPA". A type PTR query is used to get the RR with the primary name of the host. For example, a request for the host name corresponding to IP address 1.2.3.4 looks for PTR RRs for domain name "4.3.2.1.IN-ADDR.ARPA". This was then taken over to IPv6, and got a bit lengthy. --steffen | |Der Kragenbaer,The moon bear, |der holt sich munter he cheerfully and one by one |einen nach dem anderen runter wa.ks himself off |(By Robert Gernhardt) ___ Postfix-users mailing list -- postfix-users@postfix.org To unsubscribe send an email to postfix-users-le...@postfix.org
[pfx] Re: IPv6 and RBL checks
On 15.05.24 11:25, Jos Chrispijn via Postfix-users wrote: Recently I noticed this in my logfile: 0.3.9.0.0.0.0.0.0.0.0.0.0.0.0.0.0.2.0.0.4.6.8.4.0.b.8.f.7.0.6.2.bl.spamcop.net: Host or domain name not found. Name service error for name=0.3.9.0.0.0.0.0.0.0.0.0.0.0.0.0.0.2.0.0.4.6.8.4.0.b.8.f.7.0.6.2.bl.spamcop.net type=A: Host not found, try again According to Postfix/postscreen it happens to be the reversed notation of the IPv6 sender of the email: May 11 23:14:27 terra postfix/postscreen[4111]: PASS NEW [2607:f8b0:4864:20::930]:43019 Can someone explain why bl.spamcop.net reverses the ipv6 ip, thus not recognizing it like postscreen? Matus UHLAR - fantomas via Postfix-users skrev den 2024-05-15 11:29: This is how DNSBLs work, so you can simple block 2607:f8b0:4864:: by defining *.4.6.8.4.0.b.8.f.7.0.6.2.bl.spamcop.net On 15.05.24 12:17, Benny Pedersen via Postfix-users wrote: please no dont do this Guys, I am not doing this, I am explaining why is the order reversed. -- Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/ Warning: I wish NOT to receive e-mail advertising to this address. Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu. Windows 2000: 640 MB ought to be enough for anybody ___ Postfix-users mailing list -- postfix-users@postfix.org To unsubscribe send an email to postfix-users-le...@postfix.org
[pfx] Re: IPv6 and RBL checks
Matus UHLAR - fantomas via Postfix-users skrev den 2024-05-15 11:29: On 15.05.24 11:25, Jos Chrispijn via Postfix-users wrote: Recently I noticed this in my logfile: 0.3.9.0.0.0.0.0.0.0.0.0.0.0.0.0.0.2.0.0.4.6.8.4.0.b.8.f.7.0.6.2.bl.spamcop.net: Host or domain name not found. Name service error for name=0.3.9.0.0.0.0.0.0.0.0.0.0.0.0.0.0.2.0.0.4.6.8.4.0.b.8.f.7.0.6.2.bl.spamcop.net type=A: Host not found, try again According to Postfix/postscreen it happens to be the reversed notation of the IPv6 sender of the email: May 11 23:14:27 terra postfix/postscreen[4111]: PASS NEW [2607:f8b0:4864:20::930]:43019 Can someone explain why bl.spamcop.net reverses the ipv6 ip, thus not recognizing it like postscreen? This is how DNSBLs work, so you can simple block 2607:f8b0:4864:: by defining *.4.6.8.4.0.b.8.f.7.0.6.2.bl.spamcop.net please no dont do this google ips is not so much a spam, dont atleast block on false negatives https://multirbl.valli.org/lookup/2607%3Af8b0%3A4864%3A20%3A%3A930.html ___ Postfix-users mailing list -- postfix-users@postfix.org To unsubscribe send an email to postfix-users-le...@postfix.org
[pfx] Re: IPv6 and RBL checks
Jos Chrispijn via Postfix-users skrev den 2024-05-15 11:25: Can someone explain why bl.spamcop.net reverses the ipv6 ip, thus not recognizing it like postscreen? https://multirbl.valli.org/lookup/2607%3Af8b0%3A4864%3A20%3A%3A930.html dnsbl must be reversed, not any news there and note valli.org got ptr right ? i say you have a local dns resolver problem ___ Postfix-users mailing list -- postfix-users@postfix.org To unsubscribe send an email to postfix-users-le...@postfix.org
[pfx] Re: IPv6 and RBL checks
On 15.05.24 11:25, Jos Chrispijn via Postfix-users wrote: Recently I noticed this in my logfile: 0.3.9.0.0.0.0.0.0.0.0.0.0.0.0.0.0.2.0.0.4.6.8.4.0.b.8.f.7.0.6.2.bl.spamcop.net: Host or domain name not found. Name service error for name=0.3.9.0.0.0.0.0.0.0.0.0.0.0.0.0.0.2.0.0.4.6.8.4.0.b.8.f.7.0.6.2.bl.spamcop.net type=A: Host not found, try again According to Postfix/postscreen it happens to be the reversed notation of the IPv6 sender of the email: May 11 23:14:27 terra postfix/postscreen[4111]: PASS NEW [2607:f8b0:4864:20::930]:43019 Can someone explain why bl.spamcop.net reverses the ipv6 ip, thus not recognizing it like postscreen? This is how DNSBLs work, so you can simple block 2607:f8b0:4864:: by defining *.4.6.8.4.0.b.8.f.7.0.6.2.bl.spamcop.net -- Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/ Warning: I wish NOT to receive e-mail advertising to this address. Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu. I feel like I'm diagonally parked in a parallel universe. ___ Postfix-users mailing list -- postfix-users@postfix.org To unsubscribe send an email to postfix-users-le...@postfix.org
